$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/ab844670-ed3c-32c6-85dc-3ed39dee509e.roa File: ab844670-ed3c-32c6-85dc-3ed39dee509e.roa (raw, json) Hash identifier: MNTYTA8XD9F1dNMXto5Q3deH8dROWyYk+blXMr4GwNM= Subject key identifier: B5:84:E7:35:DD:EA:0C:07:22:11:61:F3:1D:D9:9B:82:38:8A:AF:D6 Certificate issuer: /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Certificate serial: 010D0C9F4328584B5DD1E75FDF28517F86385CB0 Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/ab844670-ed3c-32c6-85dc-3ed39dee509e.roa Signing time: Tue 30 Sep 2025 13:00:40 +0000 ROA not before: Tue 30 Sep 2025 13:00:40 +0000 ROA not after: Mon 29 Dec 2025 14:00:40 +0000 asID: 13445 IP address blocks: 144.196.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5d:d1:e7:5f:df:28:51:7f:86:38:5c:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Validity Not Before: Sep 30 13:00:40 2025 GMT Not After : Dec 29 14:00:40 2025 GMT Subject: CN=b41f13f7-b8e7-4973-9ea1-f8d585d998b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:60:46:c5:a3:80:98:91:30:8d:40:b5:ce:07: 11:3d:07:1e:1d:d2:eb:a6:c9:8c:51:36:0a:55:79: 56:8f:a3:1c:3f:62:fa:cc:26:2d:45:da:14:ea:6b: d0:c5:51:99:11:8c:bf:1a:5f:4f:47:07:0f:ad:22: cc:ac:62:95:77:93:de:53:6a:a6:93:20:84:46:d1: d9:86:1d:79:b1:ac:b0:cb:47:43:f6:65:70:10:fb: 5f:cf:89:14:76:6e:f2:f6:35:cc:a2:ef:ca:d4:a6: 97:45:7d:87:0b:1f:62:25:a3:94:b7:0c:f1:f7:c7: 72:e5:d3:35:53:d3:25:45:47:7e:2f:ce:80:64:d0: 26:9b:b7:e3:f1:fc:d2:c6:cd:0b:d8:3b:b9:b6:fe: d5:72:86:ce:d8:f0:b6:d7:34:af:ff:5d:6a:2a:29: fb:f3:dc:b2:75:3c:87:81:82:94:71:1e:d5:9c:07: 2b:6a:17:c9:a6:ff:f8:71:b7:b6:aa:80:51:ba:e9: 9c:e7:02:f2:87:ed:a8:c0:7e:9b:4f:43:91:4d:a6: ea:7b:19:97:e8:18:44:29:a7:dc:72:8f:f4:a5:93: fb:0b:9d:6d:b0:47:28:00:16:23:15:28:db:70:f4: 0c:f2:b5:bc:32:28:7a:2d:5c:78:9e:e1:6c:c5:d1: 7e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:84:E7:35:DD:EA:0C:07:22:11:61:F3:1D:D9:9B:82:38:8A:AF:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/ab844670-ed3c-32c6-85dc-3ed39dee509e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl X509v3 Authority Key Identifier: keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer sbgp-ipAddrBlock: critical IPv4: 144.196.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:c5:b9:3e:10:20:dd:d3:2e:7f:ef:ed:76:33:3c:d8:49:bb: 25:1a:8c:71:c6:1b:dd:ff:5b:bb:e9:9d:da:cb:1f:87:4b:35: cb:c2:a7:36:32:4e:7d:1d:eb:6a:cb:4c:b9:36:53:d9:58:aa: 2b:58:c6:12:67:75:12:0c:ca:5b:be:6f:15:3e:ba:40:c4:0e: 76:39:67:ae:ab:2e:2f:85:0b:35:ee:43:c9:34:32:a9:a2:6c: 7d:68:e7:a6:66:4c:bb:2c:3a:b4:cb:0e:87:db:7c:b5:26:e9: 4f:7e:b7:c3:33:0c:d2:f8:00:f0:ef:21:0e:31:8e:5d:3e:e3: 0f:24:2a:7a:af:cb:e2:76:1d:54:b6:87:41:5b:16:4b:97:3b: ed:a1:6f:db:0e:e8:21:a7:4b:e0:72:b8:0f:e1:50:9f:e5:cb: a6:52:13:36:f7:98:a3:30:b8:10:5b:97:7c:eb:89:9c:7d:a9: 31:47:df:57:31:4d:0b:2d:fa:aa:0c:33:85:c7:81:a2:24:3f: dd:dc:d7:fc:77:88:c9:ca:4f:a5:55:f6:7c:f7:b7:84:97:d8: 87:45:18:d4:fe:de:e9:2a:50:71:fb:52:ff:6c:24:a2:66:9a: dc:2b:ad:c5:0d:a9:0a:a3:a3:08:14:ba:c0:dc:7e:88:0b:5f: ad:ac:e5:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtd0edf3yhRf4Y4XLAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzg4ZDJiNDEtYmI2NC00MGQ4LWIyNzQtYmE0NzA0ZDc5 ZGRmMB4XDTI1MDkzMDEzMDA0MFoXDTI1MTIyOTE0MDA0MFowLzEtMCsGA1UEAxMk YjQxZjEzZjctYjhlNy00OTczLTllYTEtZjhkNTg1ZDk5OGI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmBGxaOAmJEwjUC1zgcRPQceHdLrpsmMUTYK VXlWj6McP2L6zCYtRdoU6mvQxVGZEYy/Gl9PRwcPrSLMrGKVd5PeU2qmkyCERtHZ hh15saywy0dD9mVwEPtfz4kUdm7y9jXMou/K1KaXRX2HCx9iJaOUtwzx98dy5dM1 U9MlRUd+L86AZNAmm7fj8fzSxs0L2Du5tv7VcobO2PC21zSv/11qKin789yydTyH gYKUcR7VnAcrahfJpv/4cbe2qoBRuumc5wLyh+2owH6bT0ORTabqexmX6BhEKafc co/0pZP7C51tsEcoABYjFSjbcPQM8rW8Mih6LVx4nuFsxdF+bQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLWE5zXd6gwHIhFh8x3Zm4I4iq/WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ODhk MmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3MDRkNzlkZGYvYWI4NDQ2NzAtZWQzYy0z MmM2LTg1ZGMtM2VkMzlkZWU1MDllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzg4ZDJiNDEtYmI2NC00MGQ4LWIy NzQtYmE0NzA0ZDc5ZGRmLzc4OGQyYjQxLWJiNjQtNDBkOC1iMjc0LWJhNDcwNGQ3 OWRkZi5jcmwwHwYDVR0jBBgwFoAUrQmtC8LYeFHJn6cxY0e41mzW5TUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83ODhkMmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3 MDRkNzlkZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEkMQwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIjFuT4QIN3TLn/v7XYzPNhJuyUajHHGG93/W7vpndrLH4dLNcvCpzYy Tn0d62rLTLk2U9lYqitYxhJndRIMylu+bxU+ukDEDnY5Z66rLi+FCzXuQ8k0Mqmi bH1o56ZmTLssOrTLDofbfLUm6U9+t8MzDNL4APDvIQ4xjl0+4w8kKnqvy+J2HVS2 h0FbFkuXO+2hb9sO6CGnS+ByuA/hUJ/ly6ZSEzb3mKMwuBBbl3zriZx9qTFH31cx TQst+qoMM4XHgaIkP93c1/x3iMnKT6VV9nz3t4SX2IdFGNT+3ukqUHH7Uv9sJKJm mtwrrcUNqQqjowgUusDcfogLX62s5fA= -----END CERTIFICATE-----Generated at Sat Oct 11 08:42:51 2025 by rpki-client